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CENTRAL FAX CENTER 

SEP 2 1 2006 

Claim, 25-3S are still pending in this application. No claim amendments have been 

made. 

ty Pri " r Art Pi "'- 1 -™ to be Solved 

Claim 25 is a merhod for assessing the risk of fraud of a financial ■rarvsac.ion wimin a 
disputed sys,em, and Cain, 32 ckums a disced risk assessmen. system for asaesang d>e 
risk of fraud of a financial transaction. 

Prior an fraud de.ec.ion sys.cms de,ec, fraud by processing uaasacioaal data at a central 
««. Unfortunately, addition* data located a, the precise source of the tr.nsac.iou no, 
MM to the centra, server for processing, and Urns a comp.ee risk assessment cannot be 
performed. In orher words, performing risk scoring . a single, cenrra. .ocauon generaUy does 
no. enable all of .he available dcmil regarding dud transition .0 be included in rhe nsk 
assessment. 

For example, if a central scoring location receives transactional data indicating a $5,000 
purchase of computer equipment, there is no additional data received indicating whether a *nglc 
L was purchased or whether five $1,000 computers were purchased (even though the purchase 
of five computers would be considered riskier). This problem is especially prevalent ^nhne 
transaction, Other examples of at-source data that are typically not sent to a central locate to 
be included in a risk assessment include Web browser information, a TCP/IP address, an e-ma.1 
address, server information, etc. The problem to be solved then, is how to include tins remote, at 
source data, in the assessment of risk of a financial transaction. 

One solution might be to make a concerted effort to send ALL at-source data from 
remote locations to a central server for processing. But, this approach is problematic in that « 
can be difficult to arrange for all the data to be transmit centrally, the types of data can change 
thus requiring the central server to adapt to new data fields, and data privacy issues emerge when 
sensitive information is being sent to a central site. 



Thft Presen t Invention 
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Even though technical hurdles exist, the best way to solve this problem is to perform 

p^smgandsconngofth^ *" 
because additional at-source information (that might be sensitive) is now being used at 
dislrib «ted locations to assess risk (and because certain infonnation will be sent from a central 
location to a distributed location), the data is encrypted and processing is performed on he 
encrypted data, thus eliminating the possibility of releasing sensitive information. It ts turther 
real ized that because the data is being processed both centrally and at distributed client locauons, 
that novel techniques for processing the data can be used. It is through a combination of these 
techniques that the presently claimed invention addresses the above problem. 

For example, claim 25 requires that first and second financial transactions are received at 
a central computer system. These transactions represent a financial transaction for a particular 
account and a previous transaction for that account. Features are generated for each transacts 
and the changes between these features are then determined at the central server. As is known to 
one of skill in the art, use offers (or characteristic variables) is a known technique of 
assessing risk based upon sets of data. Before these feature changes are transmitted to a chent 
computer system for further processing claim 25 requires that they are encrypted to prevent the 
release of any sensitive information. 

Th<* r.ited Art nimnouished 

As explained above and as required by claim 25 (for example), the present invention 
relates to assessing financial fraud risk within a distributed system and uses analyses of finance! 
transactions and features generated from those transactions to help assess the nsk. 

The cited reference Bosch et al. {Bosch) does disclose predicting financial risk and 
analysis of financial transactions, but does not disclose the novel techniques claimed such as 
assessing risk over a distributed system and the generation of features from encryption 
transactions. For example, the office action at page 3 alleges that Bosch discloses "assessing a 
financial fraud risk within a distributed client/server system" as required in the preamble of claim 
25 But Bosch only shows a centrally located fraud risk protection system 1 00 that generates 
features and scores centrally. There is not a central server and a distributed client computer 
system that are both capable of generating features and scores as is required by claim 25. 
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second « said computer * — acdon a, pages 3-4 alleges to to 

7 L to the Abstract by determining whether no, 0 score is below a pamcular 

z£ — -- — — — — — 

features. 

Cain, 25 also requires "encrypting said fearure changes a, said centra, comparer system." 
Encrypting toe changes before a score is general aUows these changes ro be transmtned 
3 The oiuce acuon aHegcs ar page 4 dr.. to srep is disced in co.umn S, me. MML 
"le onmuy, rhis portion merCy uses dre phrase -encryption options- and i, . ciear fron. to 
°1ZZ J. and scores might be encored if drey are sen. ,o " ^ 

fearures and fcaiure changes are used to produce a to. risk score; eneryphon of — • - 
^Un-d as ft. receiver can simply decryp, « a, Ore orher end. Bu, encryption o fe^s 
^oLmatic urdess a sys.cn, is capable of operating on such encrypted datato produce . M 
Z. The present invention does InCudc such a capability while Basch discloses no such 
technique. 

Claim 25 requires "transmitting said encrypt fearu^ changes from said central 

JLined and the encrypt data may be operaled on a, a cHen, computer 

Zb.a of operating on .nested da» to produce a Halt score. The o*ce action a. e^sto dus 

chles being encryp<ed. let alone these encrypted fearure changes hemg rransmttted . a chen. 

Zcrion L elfeges to this step is M~d in column 9. .toes 3S-49 and . cohunn 9 hne 

to a data sink or a data consumer. Again, disclosing to a fina! score .a rmnsmrned .s not the 
same as transmitting encrypted feature changes from a central system to a client system. 
Transmitting a Hna. score requires no fcrto processing. Transmitting encrypt too* 
changes requires a receiving clien, system capable of operating upon these encrypt* features to 
generate a final score. 
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Cairn 25 <ur.he, requires ••encryp.tag -» «— — « * 

Looter sys,em " The office action allege, .ha, tee sKps « show, m column 10, 
TZZZ^to** merely ^ » an account issuer debase ma, has encrypnon 

cmtaly no, of generating feaun-es from an encrypt transacuon. 

Cairn V furmer ^ires "comparing said .oca. feamtos ,0 said racked feamra changes 

a, said alien, comparer sysu-m. The ae on g tra ^ onra ^ tizs Hon 
4 «> . This porrion only discloses ma, nss score am - • ^ fc 

sysrem or ,o a clearing and scmemen, sysmm. Agant, a scorn « , 

computer system). 

CUim 25 nnally requires "scoring ma resuhs of said comparing M _*« 
associarcd vrim ,ha, curren, fmancia. transaction is assessed in s , — ™- 
Kaspacrive.y. .his «ep is no, disciosed « me cired iocanom Sconn« no^mg p 
. comparison of local feamres and ccmml feamras, and nsh ^ . ^ 

manner rhrough me use ofno. only a cenutd system ma, can ganaram feamres, 
client sysusm mar can generale features. 

Claim 32 is a disced risa assessmen, system ma. requires many of » <T ~~ 
aa Cairn 25 and is believed patenrabie for me sante reasons as above. ., - requeued ma, 
rejections of claims 25 and 32 be withdrawn. 

Th e depanden, claims add fcnher requirement .ha, also ha.ped .0 distinguish the c,aime4 
invemion over me prior a*. For example, Cain, 26 realms that ,he feamres -orpomm 
;rZy informTrion ,o assis, with me risk cation; daim 30 requites ma, seconds 
Lures are a!so calcuhned, transmitted and used by me Chan, compumr sysmm. 
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Consideration of this .pp.ica.ion and b-» of .Nonce of AUowance «. eeriy date 
expedite promotion, ptoe do no, hesitate to teicphone the «nd«stgnod a, (6.2) 252 3330. 



Respectfully submitted, 
BeyIr Weaver ^/Thomas 



Joriathan O. Scott 
Registration No. 39,364 




Beyer Weaver & Thomas, LLP 

P.O. Box 778 

Berkeley, CA 94704-0778 

Telephone: (612)252-3330 

Facsimile: (612) 825-6304 
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